Users Guide

Security and
Access
Sysadmin, secadmin, netadmin
Command Mode EXEC
Usage
Information
This CLI is available only when you enable secure boot. If the startup configuration file is deleted or
compromised, use the protected version of the startup configuration file to restore the configuration
during a reboot.
Example
OS10# secure-boot protect startup-config
Supported
Releases
10.5.1.0 or later
secure-boot enable
Enables secure boot.
Syntax
secure-boot enable
Parameters None
Default Disabled
Security and
Access
Sysadmin
Command Mode CONFIGURATION
Usage
Information
If you enable secure boot, ensure that you manually protect the startup configuration file before you
reload the switch. The protected version of the startup configuration file is applied during the boot up
process. If a protected version of the startup configuration file is not available, the system applies the
default configuration.
The no version of this command removes the configuration.
Example
OS10# secure-boot enable
Supported
Releases
10.5.1.0 or later
image verify
Verifies the OS10 image file using sha256, PKI, or GPG signatures.
Syntax
image verify image-filepath {sha256 signature signature-filepath | gpg
signature signature-filepath | pki signature signature-filepath public-key
key-file}
Parameters
● image-filepath—Enter the absolute path name of the OS10 image file.
● sha256 signature signature-filepath—Verify the SHA-256 cryptographic hash signature
of the image file.
● gpg signature signature-filepath—Verify the GNU privacy guard signature of the image
file.
● pki signature signature-filepath public-key key-file—Verify the PKI-signed
digital signature of the image file.
Default None
Security and
Access
Sysadmin
Command Mode EXEC
Security 1147